Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c49f435-d4b8-4748-9d0a-a33d3916c6cd.roa
File:                     0c49f435-d4b8-4748-9d0a-a33d3916c6cd.roa (raw, json)
Hash identifier:          B3q8AzHgRyVi4W3xjGAtG2m6G/CnkdAP5bBdoyvMr7Y=
Subject key identifier:   98:E8:04:47:D7:F9:DD:E5:5B:E2:7F:8E:38:0C:D7:BB:CD:10:7C:D2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5B7F2F6E2D3FB8BDAE94B266792F9DFA27E3AFF4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c49f435-d4b8-4748-9d0a-a33d3916c6cd.roa
Signing time:             Fri 08 May 2026 00:20:48 +0000
ROA not before:           Fri 08 May 2026 00:20:48 +0000
ROA not after:            Thu 06 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        75.22.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:7f:2f:6e:2d:3f:b8:bd:ae:94:b2:66:79:2f:9d:fa:27:e3:af:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  8 00:20:48 2026 GMT
            Not After : Aug  6 23:59:59 2026 GMT
        Subject: serialNumber=6733a2029faa7f2aa9947d0bc274209b4d11c57d26c5b96b6c2786f7da2c5824, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a8:f6:2b:63:18:a1:c1:0d:db:f8:e2:c3:14:
                    1a:97:8c:d7:27:1c:38:ec:2f:83:f5:5e:d4:a7:b6:
                    43:fe:05:84:26:b3:34:3b:c5:19:cc:ec:f6:46:5e:
                    3d:6e:52:10:78:7c:41:48:88:56:02:6c:10:4f:71:
                    7f:ce:67:98:0f:f8:e9:f9:89:d0:7a:54:6c:06:b5:
                    08:76:09:48:29:1c:a7:61:20:fa:98:36:05:8f:d8:
                    7d:b2:57:9e:39:d7:2d:4c:89:1d:6a:df:2a:c9:0b:
                    bc:88:fb:42:e3:44:04:ec:ea:e5:1c:bf:d6:d8:49:
                    e9:6b:25:7b:82:38:88:3a:27:67:07:f9:70:34:d7:
                    99:a6:63:e8:81:93:17:5d:35:d7:11:08:01:1d:1a:
                    ef:e7:4a:f5:53:2c:af:6a:64:80:f3:0e:b7:10:4e:
                    52:84:25:21:ff:53:2f:bc:81:94:76:77:65:b8:27:
                    cf:f2:72:f8:ea:15:e2:fe:3f:e4:d4:43:6f:07:22:
                    78:f6:7c:62:d3:dd:ef:f1:34:cc:09:a5:ed:4f:39:
                    e9:ca:ba:63:7a:ba:d2:27:cd:12:09:64:8c:24:49:
                    cf:9c:9f:18:8f:0e:2c:7c:c0:1e:c4:0d:ca:c8:0b:
                    95:b3:e4:9f:e5:d0:f4:20:21:79:72:9e:cf:92:8b:
                    b7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E8:04:47:D7:F9:DD:E5:5B:E2:7F:8E:38:0C:D7:BB:CD:10:7C:D2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c49f435-d4b8-4748-9d0a-a33d3916c6cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.22.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d2:e9:f6:8c:66:4a:af:f4:0a:6f:33:53:41:6d:f5:81:04:87:
         c3:e8:f5:c9:8a:87:29:ae:aa:e0:e9:af:4c:49:fd:75:63:b3:
         9d:aa:9c:3e:93:94:66:1f:df:73:32:50:b1:33:e5:5c:72:9f:
         f6:b3:6c:c4:53:f8:45:d3:99:b9:53:7b:0d:91:fc:0d:b1:e9:
         d3:a5:3b:f8:6f:23:ed:f2:db:f0:1c:82:8b:79:54:80:61:b2:
         95:f8:66:46:9f:0a:bb:d7:40:c7:a6:c3:0c:2f:ef:eb:c8:5a:
         13:9b:8d:47:6e:ca:14:45:84:ac:a0:c9:e9:ab:01:de:c0:c6:
         5f:a7:ff:76:94:37:11:78:af:ce:dc:9a:ae:c7:ec:38:40:8d:
         0b:6f:8b:20:39:7a:ca:bd:6c:3b:a3:8b:d3:17:27:a9:3f:f1:
         e9:33:dc:5d:2a:44:b8:51:ab:bb:ab:ed:98:30:c9:95:51:b7:
         73:1b:29:2a:99:75:4a:ac:25:37:52:62:e3:ec:26:92:5c:c0:
         63:70:59:16:4a:cb:01:0d:80:11:cc:02:f2:c3:10:5c:98:59:
         b7:78:0a:42:59:51:7c:f9:78:81:12:57:db:97:00:f8:5f:97:
         dd:af:4e:ce:25:b6:53:31:c1:bb:aa:5d:91:da:71:fa:25:89:
         46:b1:da:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:30:19 2026 by rpki-client